GRC Analyst: ISO 27001 & Cybersecurity Oversight

BROOKS AUTOMATION; Johor; On-site; MYR 90,000 - 150,000; Full time

Job summary

Brooks Automation, a leader in automation solutions for the semiconductor industry, seeks a Governance, Risk & Compliance (GRC) Analyst to strengthen its information security and governance posture. The role collaborates with the CISO and diverse stakeholders to translate frameworks into operational processes.

You will drive ISMS, regulatory readiness, customer/security requirements, and supplier security reviews, ensuring audit readiness and continuous improvement across the security program.

Qualifications

• 5-7 years of experience in Governance, Risk & Compliance, Information Security, Internal Audit, IT Audit, Risk Management, or related discipline.
• Working knowledge of information security principles and controls.
• Experience supporting compliance initiatives or audits.
• Strong written communication and documentation skills.
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Strong organizational skills and attention to detail.
• Ability to manage multiple projects and deadlines simultaneously.

Responsibilities

• Support and maintain Brooks' ISO 27001 Information Security Management System (ISMS).
• Coordinate internal audits, external audits, surveillance audits, and certification activities.
• Assist with policy development, policy reviews, standards, procedures, and governance documentation.
• Maintain control ownership, evidence repositories, and audit readiness documentation.
• Coordinate remediation tracking and corrective action plans.
• Facilitate cybersecurity risk assessments and business impact discussions.
• Maintain risk registers and assist control owners with mitigation planning.
• Track risk treatment plans and exceptions.
• Support management reporting, metrics, and risk dashboards.
• Respond to customer security questionnaires and due diligence requests.
• Support supplier and third-party security reviews.
• Assist with regulatory and customer requirements including: ISO 27001, NIST CSF, NIST 800-171, GDPR, CRA, Semiconductor customer security requirements.
• Partner with Legal and business stakeholders on security-related contractual requirements.
• Coordinate annual security awareness training campaigns.
• Manage phishing simulation programs and track participation and compliance metrics.
• Develop security awareness communications and educational materials.
• Support incident management governance activities.
• Ensure incidents are properly documented and tracked.
• Assist with lessons learned and corrective action reviews.
• Help maintain security program documentation, standards, procedures, and evidence libraries.
• Develop metrics, dashboards, and executive reporting.
• Assist with annual policy reviews and governance initiatives.
• Drive continuous improvement activities across the security program.
• Become a key contributor to Brooks' ISO 27001 program.
• Successfully support surveillance and recertification audits.
• Help maintain audit readiness across the security program.

Skills

Governance & Compliance

Information Security

Audit

Policy development

Stakeholder communication

Job description

Brooks Automation, a leader in automation solutions for the semiconductor industry, seeks a Governance, Risk & Compliance (GRC) Analyst to strengthen its information security and governance posture. The role collaborates with the CISO and diverse stakeholders to translate frameworks into operational processes.

You will drive ISMS, regulatory readiness, customer/security requirements, and supplier security reviews, ensuring audit readiness and continuous improvement across the security program.